# Why Isn’t Malware Illegal?

**URL:** <https://boards.straightdope.com/t/why-isn-t-malware-illegal/457091>\
**Category:** Factual Questions\
**Created:** [July 19, 2008, 10:07pm UTC](https://boards.straightdope.com/t/why-isn-t-malware-illegal/457091 "2008-07-19T22:07:38Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Washoe](https://avatars.discourse-cdn.com/v4/letter/w/ecae2f/32.png) [@Washoe](https://boards.straightdope.com/u/Washoe)\
**Post date:** [July 19, 2008, 10:07pm UTC](https://boards.straightdope.com/t/why-isn-t-malware-illegal/457091/1 "2008-07-19T22:07:38Z")

</div>

There are all sorts of laws designed to protect computer networks from unwanted intrusion. As far as I know the penalties for impairing a computer’s ability to function can be quite severe. The reason these laws exist is obvious—they serve to prevent economic losses to individuals and corporations from downtime. So why doesn’t this apply to malware? Almost everybody I know has had their online activities severely crippled at one time or another by adware, spyware, browser hijackers, etc. I would venture to guess that this must cause a considerable amount of economic loss to global computer users. So why don’t the laws which protect computers from unwanted tampering also apply to malware? Malware writes code to a computer’s hard drive without the user’s knowledge or consent and disrupts its ability to function. How is this fundamentally different from someone hacking into Best Buy’s servers and engineering a denial-of-service attack?

---

<div class="post-metadata">

**Author:** ![UltraVires](https://avatars.discourse-cdn.com/v4/letter/u/ecccb3/32.png) [@UltraVires](https://boards.straightdope.com/u/UltraVires)\
**Post date:** [July 19, 2008, 10:15pm UTC](https://boards.straightdope.com/t/why-isn-t-malware-illegal/457091/2 "2008-07-19T22:15:13Z")

</div>

Because, IIRC, the malware portion of the software is agreed to by the user in the EULA.

You know that 4 page thing that you skip through and just click “I Agree”? That says that the software will install this other stuff on your hard drive and that you are fine with it…

---

<div class="post-metadata">

**Author:** ![cainxinth](https://avatars.discourse-cdn.com/v4/letter/c/7bcc69/32.png) [@cainxinth](https://boards.straightdope.com/u/cainxinth)\
**Post date:** [July 19, 2008, 11:54pm UTC](https://boards.straightdope.com/t/why-isn-t-malware-illegal/457091/3 "2008-07-19T23:54:59Z")

</div>

There’s a fine line between malware, code specifically written to infiltrate or damage a computer, and adware, which can damage systems, but isn’t designed to do so purposefully. I’m not aware of any law that specifically outlaws the mere creation or possession of malware, but there are loads of new laws criminalizing their use. Just about every major city’s DA’s office now has a cybercrime department or something like one.

---

<div class="post-metadata">

**Author:** ![RealityChuck](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/realitychuck/32/195_2.png) [@RealityChuck](https://boards.straightdope.com/u/RealityChuck)\
**Post date:** [July 20, 2008, 12:39am UTC](https://boards.straightdope.com/t/why-isn-t-malware-illegal/457091/4 "2008-07-20T00:39:18Z")

</div>

Define “malware.”

Viruses can get you into legal trouble. The creator of the Melissa virus was sent to jail for it, but you have to find the person who created them. Nowadays, there are too many ways to hide yourself on the Internet (uploading the virus from a car outside a Starbucks or some place with an open wireless network, for instance, then driving away).

Adware often announces what it will do in its EULA. The problem is that no one reads the fine print, so they install them without realizing the problem.

As for spyware and other problems, it has been hard to create laws to stop it being installed that wouldn’t cause problems for legitimate software companies.

---

<div class="post-metadata">

**Author:** ![mks57](https://avatars.discourse-cdn.com/v4/letter/m/b9bd4f/32.png) [@mks57](https://boards.straightdope.com/u/mks57)\
**Post date:** [July 20, 2008, 3:30am UTC](https://boards.straightdope.com/t/why-isn-t-malware-illegal/457091/5 "2008-07-20T03:30:19Z")

</div>

Why aren’t hammers illegal?

Trying to classify code as “good” or “evil” is a dangerous and futile exercise.

---

<div class="post-metadata">

**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\
**Post date:** [July 20, 2008, 1:52pm UTC](https://boards.straightdope.com/t/why-isn-t-malware-illegal/457091/6 "2008-07-20T13:52:36Z")

</div>

At least in the US, malware, for most reasonable definitions of the term _is_ illegal. Just like ordinary IRL vandalism is illegal.

The practical problem is this: How do you prosecute somebody you can’t catch?
